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IN THE CLAIMS: 
Amerf^i^'daims follow: 



1. (Cancelled) 



2. (Currently Amended) A computer program product as claimed in claim 44, wherein said 
sequence of predefined actions is user defined. 

3. (Currently Amended) A computer program product as claimed in claim 44, wherein one or 
more of said predefined actions is performed after receipt of a user input confirming said predefined 
action. 



4. (Currently Amended) A - eomput e r program product as claimed in claim 1 A computer 
program product for responding to detection of an outbreak of a computer virus on a computer 
apparatus, said computer program product comprising: 

(i) sequence data defining a sequence containing a plurality of predefined actions to be followed 
upon detection of said outbreak: 

(ii) outbreak detection code operable to detect said outbreak: and 

Oii) sequence following code operable to follow said sequence of predefined actions; 

wherein said sequence of predefined actions varies in dependence upon time of day. 

5. (Currently Amended) A oomputor program product as claim e d in oloim 1, A computer 
program product for responding to detection of an outbreak of a computer virus on a computer 
apparatus, said computer program product comprising: 

(i> sequence data defining a sequence containing a plurality of predefined actions to be followed 
u pon detection of said outbreak; 

fii) outbreak detection code operable to detect said outbreak: and 

(iii) sequence following code operable to follow said sequence of predefined actions: 
wherein said sequence of predefined actions varies in dependence upon day of week. 
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6. (Currently Amended) A computer program product as claimed in claim 44, wherein one of 
said predefined actions is reducing virus detection notifications. 

7. (Currently Amended) A computer program product as claimed in claim 44, wherein one of 
said predefined actions is switching from virus quarantining to virus deletion when a computer virus 
is detected. 

8. (Currently Amended) A computer program product as claimed in claim 44, wherein one of 
said predefined actions is increasing scan options that control how thoroughly said computer system 
is scanned to detect a computer virus. 

9. (Currently Amended) A computer program product as claimed in claim 44, wherein one of 
said predefined actions is sending a copy of said detected computer virus to a remote site for 
analysis. 

10. (Currently Amended) A computer program product as claimed in claim 44, wherein one of 
said predefined actions is downloading a latest virus definition file from a remote site. 

1 1 . (Currently Amended) A computer program producr as claimed in claim 44, wherein one of 
said predefined actions is downloading a latest virus definition file from a remote site. 

12. (Currently Amended) A computer program product as claimed in claim 44, wherein one of 
said predefined actions is performing a complete virus scan of all computer files stored in at least a 
portion of said computer apparatus. 

13. (Cancelled) 

1 4. (Currently Amended) A comput er program - preduet as claimed in claim 13 A computer 
proeram product for responding to detection of an outbreak of a computer virus on a computer 
apparatus, said computer program product comprising: 




Docket: NAI1P155_99.079.01 -3- 

PACE e/3Q ' ftCVD AT 4/22;2004 3:35:50 PM [Eastern Dayliglil Time] ' SVR:USPTO-Ef XRF-i.T * DN1S:8729306 ' CSID:408 fl7l 4660 * DURATION ((nii.-ss):OS-ia 



Apr 22 04 11:44a 



SVIPG 



408 971 4GB0 



p. 7 



fi"^ sequence data defining a sequence containing a plurality of predefined actions to be followed 
upon detection of said outbreak: 

fii) outbreak detection code operable to detect said outbreak: and 
Ciii) sequence following code operable to follow said sequence of predefined actions: 
wherein one of said predefined actions is blocking e-mail attachments: 
wherein said predefined action of blocking e-mail attachments blocks identical attachments 
appearing in excess of a threshold level 

1 5 . (Currently Amended) A computor program product as claimed in claim 1, A computer 
program product for responding to detection of an outbreak of a computer virus on a computer 
a pparatus, said computer program product comprising: 

(i^ sequence data defining a sequence containing a plurality of predefined actions to be followed 
upon detection of said outbreak: 

(ii) outbreak detection code operable to detect said outbreak; and 

(iii) sequence following code operable to follow said sequence of predefined actions: 
wherein one of said predefined actions is rendering non-accessible e-mail distribution lists 

and e-mail address books of e-mail clients coupled to said computer apparatus. 

1 6. (Currently Amended) A oomputor progrom product a s claim e d in claim l. A computer 
program product for responding to detectioa of an outbreiik of a coiriputcr virus on a computer 
apparatus, said computer program product comprising: 

(i) seouencc data defining a sequence containing a plurality of predefined actions to be followed 
upon detection of said outbreak: 

(ii) outbreak detection code operable to detect said outbreak: and 

fiii) sequence following code operable to follow said sequence of predefined actions: 

wherein one of said predefined actions is restarting in administrator mode an e-mail post 
office coupled to said computer apparatus. 

1 7. (Currently Amended) A computor program product as claimed in claim U A computer 
program product for responding to detection of an outbreak of a computer virus on a computer 
a pparatus, said computer program product comprising: 
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fi) sequence data defining a sequence containing a plurality of predefined actions to be followed 
u pon detection of said outbreak: 

(ii) outbreak detection code operable to detect said outbreak: and 

(iii'> sequence following code operable to follow said sequence of predefined actions: 

wherein one of said predefined actions is closing down an e-mail post ofBce coupled to said 
computer apparatus. 




18. (Cancelled) 



19. (Currently Amended) A method as claimed in claim 4-821, wherein said sequence of 
predefined actions is user defined. 

20. (Currently Amended) A method as claimed in claim 4-821, wherein one or more of said 
predefined actions is performed after receipt of a user input confirming said predefined action. 

2 1 . (Currently Amended) A method as claimed in claim 1 8, A method of responding to detection 
of an outbreak of a computer virus on a computer apparatus, said method comprising: 

(i^j defining a sequence containing a plurality of predefined actions to be followed upon 
detection of said outbreak: 

(ii) detecting said outbreak: and 

fiii) following said sequence of predefined actions: 

wherein said sequence of predefined actions varies in dependence upon time of day, 

22. (Currently Amended) A method a s olaimod in olaim 1 8 , A method of responding to detection 
of an outbreak of a computer virus on a computer apparatus, said method comprising: 

fi) defining a sequence containing a plurality of predefined actions to be followed upon 

detection of said outbreak: 

(ii) detecting said outbreak: and 

fiii> following said sequence of predefined actions: 

wherein said sequence of predefined actions varies in de{>endence upon day of week. 
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23. (Currently Amended) A method as claimed in claim 4^21, wherein one of said predefined 
actions is reducing virus detection notifications. 

24. (Currently Amended) A method as claimed in claim 4^821, wherein one of said predefined 
actions is switching firom virus quarantining to virus deletion when a computer virus is detected. 

25. (Currently Amended) A method as claimed in claim 4^21, wherein one of said predefined 
actions is increasing scan options that control how thoroughly said computer system is scanned 
to detect a computer virus. 




26. (Currently Amended) A method as claimed in claim 4^21, wherein one of said predefined 
actions is sending a copy of said detected computer vims to a remote site for analysis. 



27. (Currently Amended) A method as claimed in claim 4r&21. wherein one of said predefmed 
actions is downloading a latest virus definition file from a remote site. 

28. (Currently Amended) A method as claimed in claim +S21, wherein one of said predefined 
actions is downloading a latest virus definition file from a remote site. 

29. (Currently Amended) A method as claimed in claim -1-S2J_, wherein one of said predefined 
actions is performing a complete virus scan of all computer files stored in at least a portion of said 
computer apparatus. 

30. (Cancelled) 

3 1 . (Currently Amended) A m e th o d qg cla ii^ie d in cl cHrRv^Or A method of respor:ding to detection 
of an outbreak of a computer virus on a computer apparatus, said method comprising: 

(\) defining a sequence containing a pluralitv of predefined actions to be followed upon 
detection of said outbreak: 

(ii) detecting said outbreak: and 

(iii) following said sequence of predefined actions: 
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wherein one of said predefined actions is blocking e-mail attachments: 
wherein said predefined action of blocking e-mail attachments blocks identical attachments 
£^peariiig in excess of a threshold level. 

32. (Currently Amended) A method as olaimod in claim 1 8 , A method of responding to detection 
of an outbreak of a computer virus on a computer apparatus, said method comprising: 

(i) defining a sequence containing a plurality of predefined actions to be followed upon 

detection of said outbreak; 

fii) detecting said outbreak: and 

(iii) following said sequence of predefined actions; 

wherein one of said predefined actions is rendering non-accessible e-mail distribution lists 
and e-mail address books of e-mail clients coupled to said computer apparatus. 

33 . (Currently Amended) A method as claimed in claim 1 8 , A method of responding to detection 
of an outbreak of a computer virus on a computer apparatus, said method comprising: 

(i) defining a sequence containing a plurality of predefined actions to be followed upon 
detection of said outbreak; 

fii) detecting said outbreak: and 

(iii^ following said sequence of predefined actions; 

wherein one of said predefined actions is restarting in ndministrator mode an e-mail post 
office coupled to said computer apparatus. 

34. (Currently Amended) A method aa claimed in claim 18. A method of responding to detection 
of an outbreak of a computer virus on a computer apparatus, said method comprising: 

(i^l defining a sequence containing a plurality of prederined actions to be Followed upon 
detection of said outbreak; 

(ii) detecting said outbreak; and 

(liil following said sequence of predefined actions; 

wherein one of said predefined actions is closing down an e-mail post office coupled to said 
computer apparatus. 
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35. (Cancelled) 

36. (Currently Amended) A computer program product as claimed in claim 358, wherein said 
sequence of predefined actions is user defined. 

37. (Currently Amended) A computer program product as claimed in claim 3f8, wherein one or 
more of said predefined actions is performed after receipt of a user input confirming said predefined 
action. 

3 8 . (Currently Amended) A comput e r program product as olaimod in claim 35 A pparatus for 
responding to detection of an outbreak of a computer virus on a computer apparatus, said computer 
program product comprising: 

sequence data storage storing sequence data defining a sequence containing a plurality of 
predefined actions to be followed upon detection of said outbreak: 

outbreak detection lo)gic operable to detect said outbreak: and 

sequence following logic operable to follow said sequence of predefined actions: 

wherein said sequence of predefined actions varies in dependence upon time of day. , 

39. (Currently Amended) A oomputor program product as olaimod in olaim 35, Apparatus for 

responding to detection of an outbreak of a computer virus on a computer apparatus, said comnutcr 

program product comprising: 

sequence data storage storing sequence data defining a sequence containing a plurality of 

predefined actions to be followed upon detection of sntd outbreak: 

outbreak detection logic operable to detect said outbreak: and 

sequence following logic operable to follow said seoitence of predefined actions: 

wherein said sequence of predefined actions vaiies in dependence upon day of week. 

40. (Currently Amended) A computer progi'am product as claimed iji claim 3^S, wlierein one of 
said predefined actions is reducing vims detection notifications. 

41. (Currently Amended) A computer program product as claimed in claim 3^8, wherein one of 
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said predefined actions is switching fh>m virus quarantining to virus deletion when computer virus is 
detected. 

42. (Currently Amended) A computer program product as claimed in claim 358, wherein one of 
said predefined actions is increasing sciin options that control how thoroughly said computer system 
is scanned to detect a computer virus. 

43. (Currently Amended) A computer program product as claimed in claim 35^8, wherein one of 
said predefined actions is sending a copy of said detected computer virus to a remote site for 
analysis. 

44. (Currently Amended) A computer program product as claimed in claim 358, wherein one of 
said predefined actions is downloading a latest virus definition file from a remote site. 

45. (Currently Amended) A computer program product as claimed in claim 358, wherein one of 
said predefined actions is downloading a latest virus definition file from a remote site. 

46. (Currently Amended) A computer program product as claimed in claim 358, wherein one of 
said predefined actions is perforaiing a complete virus scan of all computer files stored in at least a 

portion of said computer apparatus. 

47. (Cancelled) 

478. (Currently Amended) A computor pre ^Rim-produet-a s claimed in cla jftv46 ^ AppiaatLts for 

responding to detection of an outbreak of a computer vims on a computer apparatus, said computer 

pro<>rum product comprising: 

sequence data storage storing sequence data defining a sequence containing a plurality of 

prede fined actions to be followed upon detection of said outbreak: 

outbreak detection logic operable to detect said outbreak: and 

sequence following logic operable to follow said sequence of predefined actions: 

wherein one of said predefmed actions is blocking e-mail attachments: 
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wherein a said predefined action of blocking e-mail attachments blocks identical attachments 
appearing in excess of a threshold level. 

49. (Currently Amended) A comput e r program product as claim e d in claim 3 5, Apparatus for 
responding to detection of an outbreak of a computer virus on a computer apparatus, said computer 
program product comprising: 

sequence data storage storing sequence data defining a sequence containing a plurality of 

predefined actions to be followed upon detection of said outbreak: 

outbreak detection logic operable to detect said outbreak: and 

sequence following logic operable to follow said sequence of predefined actions: 

wherein one of said predefined actions is rendering non-accessible e-mail distribution lists 

and e-mail address books of e-mail clients coupled to said computer apparatus. 

50. (Currently Amended) A oomputor program produe t- as - elaim e d in claim 35. A pparatus for 
responding to detection of an outbreak of a computer virus on a computer apparatus, said computer 
program product comprising: 

sequence data storage storing sequence data defining a sequence containing a plurality of 
predefined actions to be followed upon detection of said outbreak: 

outbreak detection logic operable to detect said outbreak: and 

sequence following logic operable to follow said sequence of predcnncd actions; 

wherein one of said predefined actions is restarting in administrator mode an e-mail post 
office coupled to said computer apparatus. 

5 1. (Currently Arn e nded) A computer pr egr-afivpreduct-as-el ai med-ia-c-laim^>-5, -ADpr.rn; ii s Cor 
responding to detection of an outbreak of a computer virus on a computer apparatus, said computer 
program product comprisin}:^: 

sequence data storage storing sequence data defining n sequence containing a plurality of 
predefined actions to be followed upon d ete ction of said outbreak: 

outbreak detection logic operable to delect said outbreak: and 

sequence following logic operable to follow said sequence of predefined actio7is: 
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wherein one of said predefined actions is closing down an e-mail post office coupled to said 
computer apparatus. 
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